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1 )KI Responsive to communication(s) filed on 04 March 2008 . 
2a )□ This action is FINAL. 2b)^ This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-54 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) ^ Claim(s) 1-54 is/are rejected. 

7) 0 Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) Q The specification is objected to by the Examiner. 
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DETAILED ACTION 

1. Claims 1-54 are pending. 

2. Amendment filed 03/04/2007 has been received and 
considered. 

Claim Rejections - 35 USC §101 

3. The rejection under 35 U.S.C. 101 has been withdrawn based 
on the filed amendment. 

Claim Rejections - 35 USC § 112 

4. The following is a quotation of the second paragraph of 35 
U.S.C. 112: 

The specification shall conclude with one or more claims particularly 
pointing out and distinctly claiming the subject matter which the applicant 
regards as his invention. 

5. Claims 2-17, 22, 25-29, 31, 34-38, 40, 44-51 are rejected 
under 35 U.S.C. 112, second paragraph, as being indefinite for 
failing to particularly point out and distinctly claim the 
subject matter which applicant regards as the invention. 

6. The above claims relate to further limiting the "applying a 
function" limitation of the independent claims. The above 
claims however are unclear because they relate to applying a 
hash function to various other values that are not the address 
of the independent claims and do not say how this applying takes 
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place. The specification discloses (see paragraph [0026]) that 
the function can be done on, for example, the time of the 
request and/or the requestor's IP address. In other words the 
in the specification the returned address can be a value 
returned from hashing the time and the address, while the 
independent claims state the returned address is derived from a 
function applied to an obtained address and the dependent claims 
state that this function is a hash of different values. 
Appropriate change is required. 

Claim Rejections - 35 USC §103 

7. The following is a quotation of 35 U.S.C. 103(a) which 
forms the basis for all obviousness rejections set forth in this 
Office action: 

(a) A patent may not be obtained though the invention is not identically 
disclosed or described as set forth in section 102 of this title, if the 
differences between the subject matter sought to be patented and the prior 
art are such that the subject matter as a whole would have been obvious at 
the time the invention was made to a person having ordinary skill in the 
art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

8. Claims 1, 8-11, 13-21, 23-26, 28-30, 32-35, 37-39, 41-45, 
47-54 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Droms (Dynamic Host Configuration Protocol, March 1997) in 
view of Liston (US 20040103314). 
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As per claims 1, 21, 30, and 39, Droms discloses receiving 
a request from a user to obtain an address (see section 3.1 
number 1) ; obtaining said address; applying a function to said 
address to obtain a return address, said return address 
corresponding to a used on of a block of addresses; returning 
said return address to said user (see section 3.1 number 2 where 
the function is the checking that the network address is not 
already in use) . 

Droms fails to disclose monitoring access to said address; 
and detecting an unauthorized attempt to access said address 
when an attempted address corresponds to an unused one of said 
block of address. 

However, Liston teaches receiving requests to obtain an 
address, obtaining the address (see paragraphs [0038] and 
[0039]), monitoring accesses to the address and detecting 
unauthorized attempts when the request corresponds to an unused 
address (see paragraph [0031]). 

At the time of the invention it would have been obvious to 
a person of ordinary skill in the art to using the monitoring of 
Liston in the Droms system. 

Motivation to do so would have been to provide intrusion 
detection and countermeasures (see paragraphs [ 0012 ]-[ 0017 ]) . 
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As per claims 8-11, 25, 26, 29, 34, 35, 38, 44, and 45 the 
modified Droms and Liston system discloses changing said used 
one of said block addresses over time (see Droms section 3 where 
the lease is a certain time and the network address is changed 
after the lease is over) . 

As per claims 13-20, 23, 24, 28, 32, 33, 37, 41-43, and 47- 
54, the modified Droms and Liston system discloses tracing a 
user when said attempted address corresponds to said unused one 
of said block of addresses (see Liston paragraphs [0038]- 
[0041]); blocking additional unauthorized attempts when said 
attempted address corresponds to said unused one of said block 
of addresses (see Liston paragraphs [0038] - [0042] ) ; and wherein 
unused ones of said block of addresses corresponds to attack 
detectors (see Liston paragraphs [ 0 038 ] - [ 0 044 ] ) . 
9. Claims 2-7, 22, 31, and 40 are rejected under 35 
U.S.C. 103(a) as being unpatentable over the modified Droms and 
Liston system as applied to claims 1, 21, 30, and 39 above, and 
further in view of Hasty, JR. et al . (US 20030179750). 

As per claims 2, 22, 31, and 40, the modified Droms and 
Liston system fails to explicitly disclose hashing a user 
address of said user to obtain one value of the range of values 
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mapping to said block of addresses, said one value designating 
said used one of said block of addresses. 

However, Hasty, JR. et al. teaches such a hashing technique 
(see paragraph [0033]). 

At the time of the invention it would have been obvious to 
a person of ordinary skill in the art to use the hashing 
technique of Hasty, JR. et al . in the modified Droms and Liston 
system. 

Motivation to do so would have been to allow for auto- 
configuration and discover of IP to MAC address mappings (see 
Hasty, JR. et al . Abstract). 

As per claims 3 and 7 the modified Droms, Liston, and 
Hasty, JR. et al . system fails to explicitly disclose hashing 
the time to obtain the address. 

However, as discussed above Droms teaches changing an 
address over time based on a lease started when the address is 
requested and Hasty, JR. et al . teaches choosing an address 
based on a hashing a user address. 

Because both Droms and Hasty, JR. et al . teach methods of 
choosing network addresses it would have been obvious to one 
skilled in the art to substitute the request time of Droms for 



Application/Control Page 7 

Number: 10/826,897 
Art Unit: 2137 

the user address of Hasty, JR. et al . to achieve the predictable 
result of assigning a network address. 

As per claims 4-6 the modified Droms, Liston and Hasty, JR. 
et al. system discloses tracing a user when said attempted 
address corresponds to said unused one of said block of 
addresses (see Liston paragraphs [0038] - [0041] ) ; blocking 
additional unauthorized attempts when said attempted address 
corresponds to said unused one of said block of addresses (see 
Liston paragraphs [ 0038 ]-[ 0042 ]) ; and wherein unused ones of 
said block of addresses corresponds to attack detectors (see 
Liston paragraphs [ 0038 ]-[ 0044 ]) . 

10. Claims 12, 27, 36 and 46 are rejected under 35 
U.S.C. 103(a) as being unpatentable over the modified Droms, 
Liston and Hasty, JR. et al . system as applied to claims 8, 25, 
34, and 44 above, and further in view of Griffiths et al . (US 
6286045) . 

As per claims 12, 27, 36, and 46 the modified Droms, Liston 
and Hasty, JR. et al . system fails to disclose randomly choosing 
an address. 

However, Griffiths et al . teaches randomly choosing an IP 
address (see column 23 lines 47-49) . 
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At the time of the invention it would have been obvious to 
a person of ordinary skill in the art to randomly choose an 
address in the modified Droms, Liston and Hasty, JR. et al . 
system. 

Motivation to do so would have been to determine round trip 
times (see column 23 lines 44-51). 

Response to Arguments 

11. Applicant's arguments with respect to claims 1-54 have been 
considered but are moot in view of the new ground (s) of 
re j ection . 

Conclusion 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to MICHAEL 
PYZOCHA whose telephone number is (571)272-3875. The examiner 
can normally be reached on 7:00am - 4:30pm first Fridays of the 
bi-week off. 

If attempts to reach the examiner by telephone are 
unsuccessful, the examiner's supervisor, Emmanuel Moise can be 
reached on (571) 272-3865. The fax phone number for the 
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organization where this application or proceeding is assigned is 
571-273-8300. 

Information regarding the status of an application may be 
obtained from the Patent Application Information Retrieval 

(PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, 
see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free) . If you would 
like assistance from a USPTO Customer Service Representative or 
access to the automated information system, call 800-786-9199 

(IN USA OR CANADA) or 571-272-1000. 

MJP 

/Emmanuel L. Moise/ 

Supervisory Patent Examiner, Art Unit 2137 



